Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/aseE5UIOOZOvLgAVf4y5hg945mg.asa
File:                     aseE5UIOOZOvLgAVf4y5hg945mg.asa (raw, json)
Hash identifier:          tmvDLWOr5CBzaWnct6BrvCud5sVjpJmKB5Z2axelgEA=
Subject key identifier:   6A:C7:84:E5:42:0E:39:93:AF:2E:00:15:7F:8C:B9:86:0F:78:E6:68
Certificate issuer:       /CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
Certificate serial:       01A09F63B7884927F945048C779C57F81C09
Authority key identifier: E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/aseE5UIOOZOvLgAVf4y5hg945mg.asa
Signing time:             Mon 14 Sep 2026 10:08:27 +0000
ASPA not before:          Mon 14 Sep 2026 10:08:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42447
Providers:                AS: 35104
                          AS: 59796
                          AS: 198803
                          AS: 218802
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9f:63:b7:88:49:27:f9:45:04:8c:77:9c:57:f8:1c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
        Validity
            Not Before: Sep 14 10:08:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ac784e5420e3993af2e00157f8cb9860f78e668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:4a:73:09:8f:0d:42:dc:5c:cf:0a:17:c1:
                    38:2d:82:98:2e:03:7b:fc:aa:00:1b:c9:41:46:d2:
                    a5:86:cd:31:0f:45:f1:90:94:6f:99:0e:89:b1:95:
                    bb:ec:54:e7:ef:e2:19:f2:0e:c6:00:c6:c4:68:9b:
                    fd:4c:0f:52:8c:72:ce:9c:71:00:88:eb:60:81:96:
                    71:de:d9:fb:f4:30:1e:3a:e5:96:fd:f2:e9:b4:5a:
                    7c:69:68:42:2d:ff:d4:1d:16:fe:b8:59:35:d9:10:
                    d2:c9:3a:43:6c:f9:f2:78:78:e2:fb:58:9e:35:c2:
                    74:09:b8:b3:01:69:67:a5:9f:fc:08:f4:33:87:6d:
                    00:95:c5:08:94:43:ca:dc:e6:db:fb:0a:94:17:bc:
                    6c:f1:75:6a:f5:62:3a:52:dc:df:14:7e:c0:52:ba:
                    e9:c7:50:7f:4f:6a:3d:f1:8b:a1:ee:31:eb:91:ac:
                    b2:ed:be:9f:44:f0:b5:3c:bc:88:db:25:6e:1d:90:
                    21:95:9e:c6:c8:0a:36:5a:8b:60:2b:08:fe:8e:a2:
                    42:57:a6:72:40:a3:fc:60:89:e0:1f:91:68:f6:72:
                    21:24:32:bd:c6:26:f0:20:00:bd:9f:75:96:47:10:
                    c7:13:06:c7:3e:9a:40:b8:6f:8c:b0:10:73:47:e4:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:84:E5:42:0E:39:93:AF:2E:00:15:7F:8C:B9:86:0F:78:E6:68
            X509v3 Authority Key Identifier:
                keyid:E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/aseE5UIOOZOvLgAVf4y5hg945mg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42447

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:a8:ab:f0:eb:b9:b5:eb:e0:4f:fd:87:9f:3c:21:24:1e:
         2a:b9:7b:f4:a6:24:fc:fa:84:8c:8a:36:97:07:dc:65:94:80:
         b1:ad:09:fe:df:f6:37:f0:3f:61:fb:b9:84:63:e6:94:51:ae:
         7e:ab:ba:67:0c:11:c9:12:95:51:b7:e6:ec:65:6d:1f:f3:e5:
         12:81:1c:d0:9c:d0:ef:d0:e5:69:59:85:8a:04:29:46:f3:5b:
         0a:ae:26:bf:9b:35:66:48:47:90:f1:a6:7c:e2:63:1d:fb:5f:
         18:cf:a1:58:63:93:b7:55:4a:95:91:74:ed:ef:34:e6:70:40:
         17:90:5b:5c:a6:d5:6d:85:f2:1e:12:8c:7d:f5:83:55:41:cb:
         1a:61:45:fb:a4:de:94:74:5e:0a:0d:78:53:72:21:d1:4e:88:
         1e:67:68:68:bc:9f:a4:63:af:e6:7e:dc:fc:6c:70:29:68:5c:
         77:0a:5a:e7:bb:43:30:e6:5c:38:5d:42:0a:cb:a9:26:04:e3:
         e4:0a:82:f5:87:8c:4b:4e:5a:59:92:14:8f:4c:2f:c0:b9:18:
         7c:6a:b0:94:64:19:bc:a4:86:ba:4e:19:04:75:e5:6e:d6:07:
         d2:0f:56:f0:91:a4:42:f0:04:1c:64:b9:be:94:cd:de:3d:28:
         d8:63:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:46 2026 by rpki-client